This page was translated from Spanish with AI. The original version is in Spanish: read the original.

CTF

Buff

It is a very simple machine, but we are going to analyze in depth a Buffer Overflow in CloudMe 1.11.2 and an 'Unauthenticated Remote Code Execution' in 'Gym Management System 1.0'

March 18, 202420 minutes

Brainpan 1

In this machine we practice the most typical BoF (buffer overflow), the kind that usually shows up in certifications like the eCPPT or the old OSCP

February 9, 202413 minutes

In this writeup we solve the Enterprise machine from HackTheBox. It is a very interesting medium machine: we cover WordPress and Joomla web enumeration and SQL injections, escape from a Docker container and finally exploit a very interesting buffer overflow with the ret2libc technique

November 11, 202327 minutes

Jupiter

In today's machine we cover subdomain enumeration and turn a PostgreSQL injection into RCE. For privilege escalation we work with cron jobs, port forwarding and Python

November 1, 202315 minutes